OpenWrt/LEDE Project

  • Status Unconfirmed
  • Percent Complete
    0%
  • Task Type Bug Report
  • Category Kernel
  • Assigned To No-one
  • Operating System All
  • Severity High
  • Priority Very Low
  • Reported Version openwrt-21.02
  • Due in Version Undecided
  • Due Date Undecided
  • Private
Attached to Project: OpenWrt/LEDE Project
Opened by Geoff Natin - 11.10.2021

FS#4078 - Kernel panic from rt2x00usb - rt2x00queue_for_each_entry

Device: RT5370 WiFi chip + rt2x00usb driver
OpenWRT Version: 21.02 (commit b2ae42)

We're experiencing a kernel panic causing our device to frequently reboot. It's due to an Internal error: Oops: 207, or sometimes Internal error: Oops: 206. It seems to happen often when we connect several devices to the RT5370 WiFi chip which uses the rt2x00usb driver.

It is happening on multiple devices and was not an issue for us on 18.06 (commit c3bd13).

Here's a relevant trace of the issue:

[ 4576.824582] 8<--- cut here ---
[ 4576.827674] Unable to handle kernel NULL pointer dereference at virtual address 00000008
[ 4576.835810] pgd = 1b97c305
[ 4576.849425] Internal error: Oops: 207 [#1] SMP ARM
[ 4576.859700] Modules linked in: xt_connlimit rt2800usb rt2800lib pppoe ppp_async nf_conncount iptable_nat brcmfmac xt_state xt_nat xt_helper xt_conntrack xt_connmark xt_cov
[ 4576.859858]  deflate zlib_inflate zlib_deflate cbc authenc crypto_acompress dwc3 fsl_mph_dr_of ehci_fsl
[ 4576.835810] pgd = 1b97c305
[ 4576.967462] CPU: 2 PID: 9400 Comm: kworker/u8:2 Not tainted 5.4.143 #0
[ 4576.979513] Hardware name: Allwinner sun8i Family
[ 4576.989779] Workqueue: phy1 rt2x00usb_work_rxdone [rt2x00usb]
[ 4577.001057] PC is at rt2x00queue_for_each_entry+0x378/0x618 [rt2x00lib]
[ 4577.011805] LR is at rt2x00queue_for_each_entry+0x2c0/0x618 [rt2x00lib]
[ 4577.018409] pc : [<bf3a05e4>]    lr : [<bf3a052c>]    psr: 60000013
[ 4577.024665] sp : e749dc50  ip : 00000000  fp : 00000001
[ 4577.029882] r10: e749dd60  r9 : 00000000  r8 : e778f748
[ 4577.035099] r7 : 00000000  r6 : e9bcdfa0  r5 : e71a6f00  r4 : e749dc74
[ 4577.041615] r3 : 00000006  r2 : 00000000  r1 : e856f85c  r0 : 00000006
[ 4577.048159] Flags: nZCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment none
[ 4577.055320] Control: 30c5387d  Table: 69bb9e40  DAC: 9f1e88c3
[ 4577.061073] Process kworker/u8:2 (pid: 9400, stack limit = 0x35a706a0)
[ 4577.067593] Stack: (0xe749dc50 to 0xe749e000)
[ 4577.071946] dc40:                                     e9b7d458 e9bcdfa0 e71a6f00 e9bccd00
[ 4577.080114] dc60: 00000000 bf3a1544 00000000 00000000 00000000 00000188 00180021 00000000
[ 4577.088281] dc80: 00000000 00000000 0000002b 00000003 00000005 00000000 00000000 00000000
[ 4577.096449] dca0: e71a6f00 e9bcdfa0 e9b7d458 e9bccd00 e749dd04 00000000 e749dd60 bf39eff4
[ 4577.104616] dcc0: 00000000 00000000 00000000 00000000 00000000 e749dd60 e749dd60 e9bccd00
[ 4577.112784] dce0: 00000000 e9bcd15c 00000000 e749dd60 00000001 bf2f1400 e778f748 e95eae28
[ 4577.120951] dd00: 00000000 e778f748 e9bccd00 e749dd60 000000d0 e9bccd00 00000021 e9bccd00
[ 4577.129119] dd20: 00000001 00000000 e749ddc8 bf2f1528 00000001 e95ea580 e71a6f00 00000000
[ 4577.137286] dd40: e95ea580 00000021 e9bccd00 bf2f8014 00000001 eb1f1c10 00000000 00000000
[ 4577.145453] dd60: e749dd60 e749dd60 00000000 00000000 e9bccd00 e95ea580 e778f000 00000000
[ 4577.153620] dd80: 00000000 00000002 68808044 e71a6f00 e95ea580 e9bccd00 e9bcd29c 00000000
[ 4577.161788] dda0: e9bcd15c bf2f97fc 00000008 e9bccd00 e749ddb0 e9bccd00 e9bcce5c bf32f75c
[ 4577.169955] ddc0: 00000000 00000000 e9bccd00 ffffffe8 e71e30c0 e749de70 e880e058 e9bcd39c
[ 4577.178121] dde0: e9bcd3a0 00000000 ef6cd498 00000000 c0c57900 00000040 c0e03080 c0243fe8
[ 4577.186289] de00: 00000000 00000006 c0e03098 c0e03080 40000006 ffffe000 00000101 c02022d8
[ 4577.194456] de20: e71e30c0 e9bccd00 e95ea580 c0c51508 c0c57900 0000000a c0c51494 0006869c
[ 4577.202624] de40: c0e03d00 c08fbeac 04208060 c08fbe74 e9bcdfa0 60000013 ffffe000 e71e30c0
[ 4577.210791] de60: ffffffe3 e7231e40 00000004 00000000 ffffe000 c0244324 000001ff c02443f0
[ 4577.218958] de80: e8f2aae0 e9bcdfa0 e71e30c0 bf39d900 000013b2 e9bcdfa0 00000000 00000000
[ 4577.227125] dea0: 00000000 ffffffe3 00000018 00000000 0000000c 00000001 00000000 00000000
[ 4577.235292] dec0: 00000000 00000000 00000000 00000000 e9bce5d8 e749def4 c0e04e50 eb29a700
[ 4577.243459] dee0: 00000000 00000100 00000000 bf3ad660 eb05c200 00000028 c08fe0c8 e749df14
[ 4577.251626] df00: bf3ad610 e9bce5d8 e86c8380 eb006200 eb29a700 e7bc6a51 e9bce5d8 e86c8380
[ 4577.259794] df20: eb006200 c02575c0 00000088 c0e03d00 e86c8380 e86c8394 eb006200 00000088
[ 4577.267961] df40: c0e03d00 eb006218 eb006200 c025785c c0e0c5f0 c08fcf78 ffffe000 e86c8380
[ 4577.276128] df60: c0257818 e9b9c000 e8cc0f80 00000000 e749c000 e86c8380 c0257818 eb131eac
[ 4577.284295] df80: e9b9c01c c025d338 00001228 e8cc0f80 c025d1ec 00000000 00000000 00000000
[ 4577.292462] dfa0: 00000000 00000000 00000000 c02011f8 00000000 00000000 00000000 00000000
[ 4577.300629] dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 4577.308795] dfe0: 00000000 00000000 00000000 00000000 00000013 00000000 00000000 00000000
[ 4577.317043] [<bf3a05e4>] (rt2x00queue_for_each_entry [rt2x00lib]) from [<bf3a1544>] (rt2x00queue_write_tx_frame+0x24/0x418 [rt2x00lib])
[ 4577.329215] [<bf3a1544>] (rt2x00queue_write_tx_frame [rt2x00lib]) from [<bf39eff4>] (rt2x00mac_tx+0x88/0x358 [rt2x00lib])
[ 4577.340316] [<bf39eff4>] (rt2x00mac_tx [rt2x00lib]) from [<bf2f1400>] (ieee80211_beacon_update_cntdwn+0x29c/0xd20 [mac80211])
[ 4577.351723] [<bf2f1400>] (ieee80211_beacon_update_cntdwn [mac80211]) from [<bf2f1528>] (ieee80211_beacon_update_cntdwn+0x3c4/0xd20 [mac80211])
[ 4577.364582] [<bf2f1528>] (ieee80211_beacon_update_cntdwn [mac80211]) from [<bf2f8014>] (ieee80211_tx_prepare_skb+0x22c/0x254 [mac80211])
[ 4577.376919] [<bf2f8014>] (ieee80211_tx_prepare_skb [mac80211]) from [<bf2f97fc>] (ieee80211_tx_pending+0xac/0x258 [mac80211])
[ 4577.388262] [<bf2f97fc>] (ieee80211_tx_pending [mac80211]) from [<c0243fe8>] (tasklet_action_common.constprop.3+0x64/0xe8)
[ 4577.399295] [<c0243fe8>] (tasklet_action_common.constprop.3) from [<c02022d8>] (__do_softirq+0x120/0x2b0)
[ 4577.408851] [<c02022d8>] (__do_softirq) from [<c0244324>] (do_softirq.part.2+0x3c/0x44)
[ 4577.416845] [<c0244324>] (do_softirq.part.2) from [<c02443f0>] (__local_bh_enable_ip+0xc4/0xd4)
[ 4577.425541] [<c02443f0>] (__local_bh_enable_ip) from [<bf39d900>] (rt2x00lib_rxdone+0x250/0x5f4 [rt2x00lib])
[ 4577.435369] [<bf39d900>] (rt2x00lib_rxdone [rt2x00lib]) from [<bf3ad660>] (rt2x00usb_work_rxdone+0x50/0x90 [rt2x00usb])
[ 4577.446157] [<bf3ad660>] (rt2x00usb_work_rxdone [rt2x00usb]) from [<c02575c0>] (process_one_work+0x218/0x470)
[ 4577.456061] [<c02575c0>] (process_one_work) from [<c025785c>] (worker_thread+0x44/0x5dc)
[ 4577.464145] [<c025785c>] (worker_thread) from [<c025d338>] (kthread+0x14c/0x150)
[ 4577.471534] [<c025d338>] (kthread) from [<c02011f8>] (ret_from_fork+0x14/0x3c)
[ 4577.478744] Exception stack(0xe749dfb0 to 0xe749dff8)
[ 4577.483789] dfa0:                                     00000000 00000000 00000000 00000000
[ 4577.491955] dfc0: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
[ 4577.500120] dfe0: 00000000 00000000 00000000 00000000 00000013 00000000
[ 4577.506728] Code: e5d53022 e5d80020 e3130001 1a000068 (e5d73008) 
[ 4577.512929] ---[ end trace acdac39c83d22d1a ]---
[ 4577.517552] Kernel panic - not syncing: Fatal exception in interrupt

The device we are using is an InvizBox 2. If it would help, we would be happy to contribute one for testing as we are planning to bring it into OpenWRT mainline once we have the time and knowledge.

Project Manager
Felix Fietkau commented on 23.11.2021 17:43

Please try the latest version (master or 21.02). It should fix this issue

Loading...

Available keyboard shortcuts

Tasklist

Task Details

Task Editing